Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier:          WUJE+e90ZD3ncEqf//AeIYqzVCYfvlw1pssdEI2MghE=
Subject key identifier:   38:93:85:16:28:5E:3F:CD:E0:00:86:11:F8:AA:86:30:A4:FC:60:39
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       0251
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number:          024B
Signing time:             Sat 23 Aug 2025 04:19:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:19:08 +0000
Manifest next update:     Mon 25 Aug 2025 04:19:08 +0000
Files and hashes:         1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: umF64zKL6WxH+ESUoQAB9M3PxBa8DV4LW7h7+XGWtX0=)
                          2: E39F7394D71F11EFBDA86D9C762E951A.roa (hash: UaFjuj4h6iiPJ7i8a3Sfc3NzxnTj31aeIAuUOtd9TMg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: Aug 23 04:19:08 2025 GMT
            Not After : Aug 25 04:19:08 2025 GMT
        Subject: CN=68a9413d-b9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:23:51:cd:26:df:5a:1e:84:6c:0d:cd:43:2e:
                    05:4c:3c:51:cf:f9:d1:0a:e1:5b:9c:1f:19:30:2c:
                    18:54:4f:a5:3d:a8:59:70:58:e8:9a:07:29:f2:bd:
                    42:73:c7:3a:4d:19:c7:a8:18:a3:7e:38:91:cf:1e:
                    1a:cd:cc:53:be:05:13:1c:a9:18:e7:50:e5:7b:14:
                    61:9c:65:97:b0:c6:a1:42:5b:46:ee:69:86:d1:81:
                    6d:43:cd:dd:73:d0:34:05:cf:35:b6:ee:80:fb:66:
                    e1:32:f2:bb:10:24:c5:25:ef:d4:00:f2:98:9f:19:
                    42:b5:5d:00:91:2c:ee:d4:79:26:e6:27:1e:90:8e:
                    15:da:30:9b:42:d5:d4:44:1e:75:89:34:ab:b1:2d:
                    38:ed:1e:bd:3a:ef:a1:24:9a:ae:4c:bf:47:6f:09:
                    ae:a3:66:69:42:b8:37:4d:f5:7a:3b:8e:84:d9:61:
                    70:80:0e:1d:7f:ae:1c:fe:d6:d9:63:6a:7f:ce:e9:
                    e9:f3:e3:07:e6:68:66:d8:b7:05:73:82:2e:ff:15:
                    d7:f5:9a:b3:2d:6e:03:0c:bb:de:a8:8a:f2:95:8e:
                    ea:da:7a:f2:11:cb:ed:ce:95:a8:cd:1b:ca:2c:53:
                    4f:21:c2:ac:9e:dc:57:a8:7e:a6:cc:dc:88:50:90:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:85:16:28:5E:3F:CD:E0:00:86:11:F8:AA:86:30:A4:FC:60:39
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:4c:b9:79:4e:5b:db:49:b9:74:08:cf:9d:37:af:14:b1:
         6d:bb:b4:cb:95:26:39:26:ae:d3:45:fc:d0:bb:ba:bd:36:0b:
         5e:cf:85:fe:48:ff:b9:0c:c2:f5:13:1e:ea:df:8b:b3:cd:cd:
         3f:8f:1a:af:66:08:54:23:e8:19:f8:65:3c:ec:c9:03:5a:71:
         8c:16:46:7d:5c:95:d5:2b:54:e8:15:c8:05:ae:ba:b2:3a:79:
         e4:cf:4f:05:fb:1b:54:a0:41:2a:d2:c9:7f:aa:83:6e:e9:04:
         2c:99:69:de:e1:e7:28:c0:9c:48:0b:bc:29:87:33:0e:f1:f8:
         cd:d8:a4:6a:90:59:2e:7a:ee:51:7b:5c:c3:6d:83:36:96:63:
         78:2c:da:73:9b:71:a4:b0:06:da:67:40:81:6b:7b:69:6f:19:
         da:84:f2:db:5f:7d:03:4b:07:89:c0:9d:a4:16:7b:0e:93:dc:
         3a:89:45:38:57:56:a3:bf:10:86:78:0c:16:bd:c8:d2:00:ea:
         c1:fa:87:8c:d1:61:b0:b6:6d:a5:df:fc:9a:17:36:5c:84:b3:
         47:a6:86:0a:ae:b7:d0:53:d9:de:9b:56:70:74:45:9a:b0:cc:
         b6:57:32:06:aa:0d:b5:9e:4f:76:12:2a:10:57:cd:00:84:02:
         31:c4:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:55 2025 by rpki-client